Authorization related problem

[Former Member]

Hi experts,

I have created an authorization profile where I copied from SAP_ALL and at S_tcode field I excluded the SPRO transaction code. The user using this profile can access all tcodes except SPRO. But he cannot create cost center using KS01. How can I solve this problem ??

Regards

ASAD

[Former Member]

Hi Asad,

You cannot simply restrict SPRO transactions like that. The easier way is to create a SPRO DISPLAY role for the user. Your SPRO display role should S_PROJECT auth object with display only, S_PROJECTS auth object with activity 01, SM30/SM31,

S_TABU_DIS with activity 03 and every other authorization object with display-only access.

Regards,

Jazz

[Former Member]

Hi Jazz ,

I wish to restrict user from only t.code SPRO (not like change, display). But all t.codes and authorization.

ASAD

[former_member66264]

Thats not how it works....

Spro call's other trxn snum, sm30 , ...if they have access to those, they can customize. Nothing to do with SPRO read only or not.

[former_member906139]

Hello,

The functional work require specific authorization.

Hence here you no need to give SAP_ALL, you need to create one role as follows.

Go to tcode pfcg

Create new role (Ex. Zrole)

Go to tab authorization tab

Click on change authorization data

Do not accept given template

Click on selection criteria

Here select auth according to functional area.

Regards,

Abhay